Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/gdGrf4D9k-A_WQILKGoLnMoxWwM.roa
File: gdGrf4D9k-A_WQILKGoLnMoxWwM.roa (raw, json)
Hash identifier: +YNgVcHyd14shHgP1G9Qx20XMYPGvMOYpjF5wiwb8To=
Subject key identifier: 81:D1:AB:7F:80:FD:93:E0:3F:59:02:0B:28:6A:0B:9C:CA:31:5B:03
Certificate issuer: /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial: 018CC94C06C8CFE53182D47EF032B8AAB8CC
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/gdGrf4D9k-A_WQILKGoLnMoxWwM.roa
Signing time: Tue 02 Jan 2024 08:30:52 +0000
ROA not before: Tue 02 Jan 2024 08:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208247
IP address blocks: 45.151.87.0/24 maxlen: 24
45.151.86.0/24 maxlen: 24
2a0f:1500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:06:c8:cf:e5:31:82:d4:7e:f0:32:b8:aa:b8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Validity
Not Before: Jan 2 08:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81d1ab7f80fd93e03f59020b286a0b9cca315b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:64:2c:3b:bf:39:7f:be:d4:9e:64:7a:76:
fc:42:66:75:cd:0b:c8:c8:93:6a:b4:6d:98:4a:f5:
97:ce:3e:93:47:e6:cf:19:cb:7a:b5:c4:f0:84:5e:
f6:58:73:c8:7b:c4:97:80:31:7b:db:7c:ad:b8:ca:
23:82:39:fe:cc:4a:95:c0:39:14:34:8c:68:33:60:
d5:92:c7:71:73:22:48:92:bb:d5:8a:be:7e:35:ae:
92:32:e0:06:39:7a:f8:2a:56:ad:d4:48:28:9b:6e:
78:3a:57:6e:cb:64:d3:c6:93:d7:3f:b7:5e:50:21:
d6:42:f2:9e:81:5e:e0:5a:60:9b:b1:5e:d3:95:74:
b8:9e:13:90:b5:2d:f3:a2:8c:a7:94:2a:76:b5:be:
1b:23:5e:a8:dc:cb:55:d7:f5:67:4a:dd:68:f8:2e:
6c:b8:ad:67:65:b3:54:74:58:2d:56:e6:b6:f7:aa:
a1:ce:6d:ab:f8:d2:9e:cb:ba:ff:b9:73:8b:b6:96:
e3:e8:61:b1:57:83:1e:27:cf:7a:6a:e3:a3:9a:8d:
b9:fb:58:5a:51:e8:5c:47:45:ba:0c:55:10:75:36:
4e:c8:fa:4a:a4:d0:ba:d2:ae:93:0e:8a:06:ea:4b:
71:70:f5:59:69:f8:26:bf:e3:37:35:7a:85:4c:3c:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D1:AB:7F:80:FD:93:E0:3F:59:02:0B:28:6A:0B:9C:CA:31:5B:03
X509v3 Authority Key Identifier:
keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/gdGrf4D9k-A_WQILKGoLnMoxWwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.86.0/23
IPv6:
2a0f:1500::/29
Signature Algorithm: sha256WithRSAEncryption
76:35:68:2f:0b:f3:c0:01:ac:06:ae:3e:f9:50:e0:bc:41:89:
55:22:99:7c:e4:17:60:30:da:15:57:9b:cb:b4:a5:0c:2c:f4:
49:b1:ca:9e:ec:a5:24:54:ef:9f:f8:37:63:56:00:e1:c9:67:
18:1a:96:8e:8c:3e:ce:33:42:7e:d5:9b:91:08:b9:3d:94:3a:
d9:de:88:26:66:e5:4b:f9:bb:ba:6f:1d:9b:4e:a4:ed:f7:e8:
7e:1b:e8:6f:ea:9a:f0:c8:03:65:c7:d7:f2:fd:8a:f6:a9:41:
11:62:41:b9:d1:f0:4d:4a:47:b8:88:48:f6:2f:6c:25:99:3a:
5c:cc:25:72:23:18:96:1e:d6:43:32:ad:e2:a6:18:f2:cf:80:
c6:61:e4:7f:57:2f:f3:1c:4c:f2:31:19:b0:13:4b:db:ed:40:
a0:28:0d:86:c3:d7:f5:46:8b:ef:a2:d7:a7:bd:2c:63:fd:4e:
3d:a3:77:fb:f4:ce:65:64:bb:4f:52:df:be:57:7d:ab:be:50:
44:2a:4b:c0:b6:c6:d3:37:a3:5d:08:3d:64:a1:e3:fd:bd:ba:
87:6a:89:fa:3c:b3:62:2d:6e:32:0a:4d:cb:ab:d7:de:56:e9:
47:92:b0:dc:98:7e:2e:df:12:ab:44:10:75:35:86:c2:80:d1:
fc:dd:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:41:21 2024 by rpki-client on console-ams.rpki-client.org